CVE-2026-22535
Awaiting Analysis Awaiting Analysis - Queue
BaseFortify

Publication date: 2026-01-07

Last updated on: 2026-01-08

Assigner: S21sec

Description
An attacker with the ability to interact through the network and with access credentials, could, thanks to the unsecured (unencrypted) MQTT communications protocol, write on the server topics of the board that controls the MQTT communications
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-07
Last Modified
2026-01-08
Generated
2026-06-16
AI Q&A
2026-01-07
EPSS Evaluated
2026-06-14
NVD
CVE-2026-22535
EUVD
EUVD-2026-1194
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1366
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability involves an attacker who can interact through the network and has access credentials. Due to the MQTT communications protocol being unsecured and unencrypted, the attacker can write to server topics on the board that controls MQTT communications.

Impact Analysis

The vulnerability allows an attacker to write to MQTT server topics, potentially leading to unauthorized control or manipulation of the MQTT communications. This could result in compromised system integrity, unauthorized actions, or disruption of services relying on MQTT communications.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-22535. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart